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CLAIMS 

1 . A system for providing an electronically secured web site of a private 
network on the Internet, comprising: 

5 means for routing an external access request from the Internet to the web site 

and for limiting the external access request to the web site based on a type of the 
external access; 

means for providing an electronic wall between the Internet and the private 
network of the web site, for receiving the routed external access request from the 
10 means for routing and limiting, and for rejecting or passing the routed external access 
request; 

means for detecting the routed external access request and for determining 
whether the routed external access request is an attack on the private network of the 
web site; 

1 5 means for controlling a routing of the routed external access request within 

the private network to a particular area of the private network based on a location 
address of the particular area; and 

means for recording the routing of the routed external access request within 
the private network. 

20 

2. The system of claim 1, wherein the means for detecting the routed external 
access request detects the routed external access request at the means for providing 
the electric wall. 

25 3. The system of claim 1 , wherein the means for recording also provide 

recording of all events happening in the system. 
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4. The system of claim 1, wherein the means for recording also provide 
recording of the routing of the external access request by the means for routing and 
the receiving of the routed external access request at the means for providing an 
electronic wall. 

5 

5. The system of claim 2, wherein the means for detecting and determining 
comprises first means for detecting the routed external access request prior to its 
receipt at the means for providing the electronic wall and second means for detecting 
the routed external access request after it is received and passed by the means for 

1 0 providing the electronic wall. 

6. The system of claim 1, wherein the means for routing the external access 
request comprises: 

primary means for routing the external access request; and 
15 secondary means as backup for the primary means for routing external access 

request when the primary means for routing becomes unavailable. 

7. The system of claim 1, wherein the means for providing the electronic wall 
comprises: 

20 primary means for providing the electronic wall; and 

secondary means for providing the electronic wall when the primary means 
for providing the electronic wall becomes unavailable. 

8. A system for providing security to a plurality of hosting sites on the 
25 Internet comprising: 

a first level of security that provides a first screening of requests from the 
Internet for access to the plurality of Internet hosting sites; 
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a second level of security that detects and prevents unauthorized access to the 
plurality of Internet hosting sites by the access requests that are screened and passed 
by the first level of security; 
5 a third level of security that provides a second screening of the access requests 

that are authorized by the second level of security; and 

a fourth level of security that provides recording of all events happening in the 
plurality of Internet hosting sites. 

10 9. The system of claim 8, wherein the first level of security comprises a 

plurality of routers that screen the access requests based on a type of each of the 
access requests and route the passed access requests to the second level of security. 

10. The system of claim 8, wherein the second level of security comprises a 
15 plurality of firewall systems, each associated with a corresponding one of the Internet 

hosting sites. 

1 1 . The system of claim 10, further comprising at least one load balancer for 
load balancing the passed access requests from the first level of security across the 

20 plurality of firewall systems. 

12. The system of claim 10, wherein the second level of security further 
comprises an intrusion detection system (IDS) for detecting unauthorized entry of 
one of the passed access requests into at least one of the plurality of firewall systems; 

25 wherein the intrusion detection system comprises a first intrusion detection engine 
arranged in front of the at least one firewall system and a second intrusion detection 
engine arranged behind the at least one firewall system. 
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13. The system of claim 10, wherein the second level of security further 
comprises a plurality of IDS' s, each associated with a corresponding one of the 
plurality of firewall systems for detecting and preventing unauthorized entry of any 

5 one of the passed access requests into any one of the plurality of firewall systems. 

14. The system of claim 8, wherein the third level of security comprises 
switches that manage sub-networks within a network for each of the Internet hosting 
sites. 

10 

15. The system of claim 14, wherein the switches maintain lists of addresses 
of the sub-networks and provide the second screening of the access requests 
authorized by the second level of security based on the lists of addresses. 

15 16. The system of claim 8, wherein the third level of security comprises at 

least one switch for a corresponding one of the Internet hosting sites, wherein the at 
least one switch manages a plurality of sub-networks within a network of the 
corresponding Internet hosting site. 

20 17. The system of claim 16, wherein the at least one switch maintains 

addresses of the sub-networks of the corresponding hosting site and provides the 
second screening based on the address list of any one the access requests authorized 
by the second level of security and routed to the corresponding hosting site. 

25 18. The system of claim 17, wherein the at least one switch comprises a two 

duplicate switches with a primary switch and a secondary switch, wherein the 
secondary switch provides backup to the primary switch. 
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19. The method of claim 8, wherein the fourth level of security comprises an 
at least one event log manager maintained in a server that connects throughout a 
network of at least one of the plurality of Internet hosting sites and records all events 
happening to the at least one Internet hosting site. 
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